huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
112
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
1.34.195.13
Taiwan · Chunghwa Telecom Co., Ltd.
exposed-secretTXT12026-10-28
157.15.139.244
Indonesia · PT Ring Media Nusantara
exposed-secretTXT22026-10-28
43.245.185.251
Indonesia · PT Media Sarana Data
exposed-secretTXT22026-10-28
103.18.79.38
Indonesia · PT. Usaha Adisanggoro
exposed-secretTXT12026-10-28
43.153.71.203
United States · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
38.248.12.192
United States · Real Time Cloud Services LLC
exposed-secretTXT12026-10-28
23.27.200.64
United States · Evoxt Sdn. Bhd.
exposed-secret exploitTXT, ENV, JSON, PHP172026-10-28
85.121.245.150
Romania · M247 Europe SRL
exposed-secret exploitTXT, ENV, JSON122026-10-28
87.76.160.170
Malaysia · GB Network Solutions Sdn. Bhd.
exposed-secret exploitTXT, ENV, JSON122026-10-28
23.27.99.193
United States · Evoxt Sdn. Bhd.
exposed-secret exploitTXT, ENV, JSON122026-10-28
85.121.51.218
Romania · M247 Europe SRL
exposed-secret exploitTXT, ENV, JSON122026-10-28
217.160.244.175
Germany · IONOS SE
exploit c2 exposed-secretHTML, TXT132026-10-28
220.132.208.73
Taiwan · Chunghwa Telecom Co., Ltd.
exposed-secretENV12026-10-28
66.235.110.79
Singapore · Liberally Network, LLC
exposed-secret exploitTXT, ENV, JSON122026-10-28
167.172.34.252
The Netherlands · DigitalOcean, LLC
exposed-secretTXT12026-10-28
167.71.5.135
The Netherlands · DigitalOcean, LLC
exposed-secretTXT12026-10-28
139.59.89.10
India · DigitalOcean, LLC
exposed-secretTXT12026-10-28
77.90.39.202
Germany · Tech Tide Portugal Unipessoal LDA
exposed-secret exploitTXT, ENV, JSON122026-10-28
157.66.2.12
Indonesia · PT Ashyla Karya Abadi
exposed-secretTXT22026-10-28
66.179.136.86
United States · IONOS SE
exposed-secret exploitTXT, ENV, JSON122026-10-28
103.252.227.251
Bangladesh · Doly IT Corner
exposed-secretTXT22026-10-28
93.177.101.187
Turkey · 2E TELEKOMUNIKASYON LTD STI
exposed-secret exploitTXT, ENV, JSON122026-10-28
103.66.112.237
India · DISHAWAVES INFONET PVT. LTD
exposed-secretTXT22026-10-28
139.84.228.230
South Africa · The Constant Company, LLC
exposed-secret exploitTXT, ENV, JSON122026-10-28
103.195.188.128
Singapore · Dromatics Systems Pte Ltd
exposed-secret exploitTXT, ENV, JSON122026-10-28
89.45.45.59
Turkey · 2E TELEKOMUNIKASYON LTD STI
exposed-secret exploitTXT, ENV, JSON122026-10-28
185.155.91.252
Ukraine · Eugene N. Polishchuk
exposed-secretTXT22026-10-28
95.135.208.135
The Netherlands · Matteo Martelloni trading as DELUXHOST
exposed-secret exploitTXT, ENV, JSON122026-10-28
139.84.236.32
South Africa · The Constant Company, LLC
exposed-secret exploitTXT, ENV, JSON122026-10-28
23.95.184.226
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-10-28
23.95.192.157
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-10-28
91.233.10.181
Germany · BITSFLOWCLOUD LTD
exposed-secret exploitTXT, ENV, JSON122026-10-28
23.95.193.124
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-10-28
87.106.200.240
Germany · IONOS SE
exposed-secret exploitTXT, ENV, JSON122026-10-28
107.191.113.100
United States · InMotion Hosting, Inc.
exposed-secret exploitTXT, ENV, JSON122026-10-28
23.95.122.102
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-10-28
87.106.149.106
Germany · IONOS SE
exposed-secret exploitTXT, ENV, JSON122026-10-28
45.146.165.142
Russia · Beget LLC
exposed-secret exploitTXT, ENV, JSON122026-10-28
5.181.177.85
The Netherlands · Matteo Martelloni trading as DELUXHOST
exposed-secret exploitTXT, ENV, JSON122026-10-28
162.218.120.200
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-10-28
104.223.62.197
Canada · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-10-28
31.56.233.108
Indonesia · Matteo Martelloni trading as DELUXHOST
exposed-secret exploitTXT, ENV, JSON122026-10-28
31.58.102.86
Indonesia · Limestone Networks, Inc.
exposed-secret exploitTXT, ENV, JSON122026-10-28
166.1.2.244
United States · 2E TELEKOMUNIKASYON LTD STI
exposed-secret exploitTXT, ENV, JSON122026-10-28
136.175.82.37
United States · 2E TELEKOMUNIKASYON LTD STI
exposed-secret exploitTXT, ENV, JSON122026-10-28
217.156.64.157
Moldova · ALEXHOST SRL
exposed-secret exploitTXT, ENV, JSON122026-10-28
166.1.2.243
United States · 2E TELEKOMUNIKASYON LTD STI
exposed-secret exploitTXT, ENV, JSON122026-10-28
212.227.107.35
Spain · IONOS SE
exposed-secret exploitTXT, ENV, JSON122026-10-28
212.227.255.255
Spain · IONOS SE
exposed-secret exploitTXT, ENV, JSON122026-10-28
158.51.78.165
Canada · Limewave Communications
exposed-secret exploitTXT, ENV, JSON122026-10-28
← NewerPage 23 of 60Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free